Builds a full dev workstation from a bare Arch Linux install. https://git.cjennings.net/archsetup/atom?h=main 2026-07-20T13:18:38+00:00 2026-07-20T13:18:38+00:00 Craig Jennings c@cjennings.net 2026-07-20T13:18:38+00:00 urn:sha1:18429ed05b1653c17f2d3e8257b1297799162c48 Record the resolution (keys expired, all 10 configs purged from history, server gc'd, verified via anonymous clone) and file the cgit-exposure audit as the systemic follow-up. Update the config README to the out-of-band workflow. 2026-07-20T13:05:34+00:00 Craig Jennings c@cjennings.net 2026-07-20T13:05:20+00:00 urn:sha1:a20e8c2f839fa53659f2fc3eba18645e541e753e The repo is public via cgit, so the three plaintext configs (added 849c3fa) exposed live Proton PrivateKeys. Remove them, gitignore plaintext, and document the encrypted-only workflow. Keys rotated at Proton; history purged separately.